No telemetry
The app sends no usage analytics, crash reports, or device fingerprints to Newarc. There is no analytics SDK in the binary.
Security & Privacy
Built on your machine. Stays on your machine.
Data Collage is a desktop application. It does not phone home, sync to a cloud, or transmit any of your queries, results, or credentials to Newarc Consulting. The only network destinations the app contacts are the ones you configure.
How data flows
One arrow out. One arrow back. Nothing else.
Below is every network path that exists in the app. There is no "phone home" channel — the only Newarc-controlled endpoint is a lightweight license check that never sees your queries or results.
You
Windows desktop
HTTPS · BI Publisher SOAP · your credentials
Your Fusion pod
oraclecloud.com
Optional · off by default
Your AI provider
OpenAI / Anthropic / Gemini / local Ollama
License check · no query data
Data Collage license service
Validates your license key · operated by Newarc
Notice what's not in this diagram: no Newarc analytics and
no third-party telemetry. The only Newarc-operated endpoint is the
license check, and it never sees your queries or results.
Egress allow-list
The exhaustive list of hosts the app will ever contact.
If your network capture shows traffic to any host not on this list, that's a bug — please report it. We'll publish a fix and post-mortem.
Destination Purpose Who controls it
Your Fusion pod (e.g. fa-xxxx-saasfaprod1.fa.ocs.oraclecloud.com) SQL execution via BI Publisher SOAP and SSO login window You configure it Your AI provider, if AI Assist is enabled Natural-language → SQL prompts. Disabled by default. You configure it — bring your own key The auto-updater feed (roadmap) Version manifest + signed installer downloads Configurable; can be disabled The Data Collage license service License key validation. No query data is ever sent. Operated by Newarc Consulting Commitments
What we promise — and what enforces the promise.
No cloud sync
Connections, query history, library, snippets, and result sets are stored exclusively on your machine. Nothing is uploaded.
No DB credentials
Data Collage authenticates against Fusion as you would — basic auth or SSO. It never asks for, sees, or stores a database password.
Read-only, enforced locally
Every SQL statement is parsed and rejected before leaving your machine if it isn't a SELECT or WITH-SELECT.
Passwords in the OS vault
Fusion passwords are stored in the Windows Credential Vault under service name DataCollage. They never appear in plaintext on disk or in our SQLite database.
Code-signed installers
Releases are signed with an Azure Trusted Signing certificate, so SmartScreen can verify the binary you downloaded is the one we shipped.
Where your data actually lives
A map of every place Data Collage writes to disk.
Data Location Format
Saved connections (URL, username, app type)
%APPDATA%\\com.newarcconsulting.datacollage\\datacollage.db SQLite Fusion passwords Windows Credential Vault, service
DataCollage OS-encrypted Query history & library
%APPDATA%\\com.newarcconsulting.datacollage\\datacollage.db SQLite Snippets & custom functions Local browser storage (WebView2) JSON
Result sets In-memory only — not persisted —
Diagnostic logs Help → Open log folder Plain text
Don't take our word for it.
Run the network capture yourself. Our step-by-step guide shows three ways to verify — built-in Windows tools, Fiddler, or Wireshark.